fix(apparmor): Fix DBUS denies on Kubuntu 18.04

AppArmor denies access to systray on Kubuntu 18.04. Add DBUS rules to make systray icon work.
qTox · Mar 25, 2019 · 1d120b1 · 1d120b1
1 parent 79f800b
commit 1d120b1
Show file tree

Hide file tree

Showing 2 changed files with 86 additions and 2 deletions.
diff --git a/security/apparmor/2.12.1/usr.bin.qtox b/security/apparmor/2.12.1/usr.bin.qtox
@@ -62,13 +62,20 @@ profile qtox /usr{,/local}/bin/qtox {
     member=Introspect
     peer=(label=unconfined),
 
-  dbus send
+  dbus (send,receive)
     bus=session
     path=/StatusNotifierWatcher
     interface=org.freedesktop.DBus.Properties
     member=Get
     peer=(label=unconfined),
 
+  dbus receive
+    bus=session
+    path=/StatusNotifierItem
+    interface=org.freedesktop.DBus.Properties
+    member=GetAll
+    peer=(label=unconfined),
+
   dbus send
     bus=system
     path=/org/freedesktop/NetworkManager
@@ -125,6 +132,41 @@ profile qtox /usr{,/local}/bin/qtox {
     member=GetAll
     peer=(label=unconfined),
 
+  dbus send
+    bus=session
+    path=/StatusNotifierWatcher
+    interface=org.kde.StatusNotifierWatcher
+    member=RegisterStatusNotifierItem
+    peer=(label=unconfined),
+
+  dbus receive
+    bus=session
+    path=/StatusNotifierItem
+    interface=org.kde.StatusNotifierItem
+    member=Activate
+    peer=(label=unconfined),
+
+  dbus (send,receive)
+    bus=session
+    path=/MenuBar
+    interface=com.canonical.dbusmenu
+    member=GetLayout
+    peer=(label=unconfined),
+
+  dbus (send,receive)
+    bus=session
+    path=/MenuBar
+    interface=com.canonical.dbusmenu
+    member={AboutToShow,Event}
+    peer=(label=unconfined),
+
+  dbus send
+    bus=session
+    path=/StatusNotifierItem
+    interface=org.kde.StatusNotifierItem
+    member={NewIcon,NewToolTip}
+    peer=(label=unconfined),
+
   # System files
 
   /usr/share/hunspell/* r,

diff --git a/security/apparmor/2.13.2/usr.bin.qtox b/security/apparmor/2.13.2/usr.bin.qtox
@@ -69,13 +69,20 @@ profile qtox /usr{,/local}/bin/qtox {
     member=Introspect
     peer=(label=unconfined),
 
-  dbus send
+  dbus (send,receive)
     bus=session
     path=/StatusNotifierWatcher
     interface=org.freedesktop.DBus.Properties
     member=Get
     peer=(label=unconfined),
 
+  dbus receive
+    bus=session
+    path=/StatusNotifierItem
+    interface=org.freedesktop.DBus.Properties
+    member=GetAll
+    peer=(label=unconfined),
+
   dbus send
     bus=system
     path=/org/freedesktop/NetworkManager
@@ -132,6 +139,41 @@ profile qtox /usr{,/local}/bin/qtox {
     member=GetAll
     peer=(label=unconfined),
 
+  dbus send
+    bus=session
+    path=/StatusNotifierWatcher
+    interface=org.kde.StatusNotifierWatcher
+    member=RegisterStatusNotifierItem
+    peer=(label=unconfined),
+
+  dbus receive
+    bus=session
+    path=/StatusNotifierItem
+    interface=org.kde.StatusNotifierItem
+    member=Activate
+    peer=(label=unconfined),
+
+  dbus (send,receive)
+    bus=session
+    path=/MenuBar
+    interface=com.canonical.dbusmenu
+    member=GetLayout
+    peer=(label=unconfined),
+
+  dbus (send,receive)
+    bus=session
+    path=/MenuBar
+    interface=com.canonical.dbusmenu
+    member={AboutToShow,Event}
+    peer=(label=unconfined),
+
+  dbus send
+    bus=session
+    path=/StatusNotifierItem
+    interface=org.kde.StatusNotifierItem
+    member={NewIcon,NewToolTip}
+    peer=(label=unconfined),
+
   # System files
 
   /usr/share/hunspell/* r,